RX
Job Description
Key Responsibilities:
Risk Management & Governance:
- Understand applicable regulations, guidelines, and industry best practices (e.g., NIST, ISO, OWASP, ITIL) to manage risk and ensure compliance.
- Develop, maintain, and audit security documentation such as policies, standards, and procedures.
- Monitor internal security controls for EDR, email security, server security, and cloud security.
- Conduct internal security assessments to ensure continued compliance.
- Explain risk management roles across teams and secure buy-in for improving organizational security posture.
- Manage SOC 2 Type 2 assessments and collect evidence for relevant controls.
- Review RFPs for cybersecurity-related responses.
- Manage cybersecurity dashboards, reports, and board meeting MOMs.
- Evaluate vendors for cybersecurity controls and review firewall rules for on-premises and AWS.
Cloud & Infrastructure Security:
- Implement and manage AWS Cloud security and Office 365 security.
- Manage SOC, incident response, and business continuity activities.
- Support internal and external audits and follow up until closure on audit findings.
Security Awareness & Training:
- Create security awareness materials (PPTs, emailers) and conduct training as needed.
- Develop CISO dashboards and success reports.
- Engage with business teams to understand cybersecurity requirements.